Dynamic row level security RLS not working on service but o.k. when test role in desktop

[po]

Hi,

Have following tables 

1) fact table with sales qty and  region

2) users  with user_email and role

3) role table with role and region

users joined to role on role column and roles joined to fact table on region.

When test in desktop with  User_email = USERPRINCIPALNAME() works as expected user concerned only sees that region and their sales.  have set up role called security with user_mail = USERPRINCIPALNAME()

When publish to service, the user sees everything.  User only has viewer access and other static RLS works against user.

 If try add the user to the role in service via datasets/security then get cannot load model when try view the report in service

static RLS works o.k. in service for same user for other static roles.

Any thought as to why dynamic RLS not working in service?

Can a user belong to both a role with dynamic RLS and static RLS - it looks to be o.k. in desktop but not in service.

Thanks

[Pragati11]

Hi @po ,

Are you using a security data-set with user id's and their roles; to implement Dynamic RLS in Power BI?

Check the article on Dynamic RLS here:

https://tringuyenminh92.com/index.php/2017/08/11/dynamic-rls-row-level-security-with-power-bi/

Thanks,

Pragati

[po]

Hi,

Thansk for reply.

Yes but not working on the service.

Thanks

[Pragati11]

Hi @po ,

Are you logging with your credentials in Power BI service or the user's credentials with different role on the dataset?

You can test for other user when you are using their credentials or email:

https://blog.pragmaticworks.com/how-to-test-dynamic-row-level-security-in-power-bi

Thanks,

Pragati

[po]

Hi,

Logged into service with that user's  credenetails and even made that user admin temporarily on workspace to check test as role and can see works when test as role but when try access report users sees all data.

Thanks

[Pragati11]

Hi @po ,

Can you attach some screenshots here on what you see in Power BI Desktop and what in Power BI Service?

In my experience if RLS works fine in Power BI Desktop then will definitely work in Power BI Service as expected.

Thanks,

Pragati

[po]

Hi,

Screenshot below when try test with user concerned.

Thanks

[po]

Hi,

Finding ot works if user concerned only belongs to 1 RLS role.

If the same user belonngs to >1 RLS role get this error message.

Thanks